Privacy Policy

Who we are

Nomad Pro (shown on this website as NomadPro) is provided by Komal Amin, a sole trader, trading as Nomad Pro. We are the controller for the limited personal data described in this policy.

You can write to us at 5 Nightingale Court, Sheepcote Road, Harrow HA1 2JB, United Kingdom, or email hello@nomadpro.ai. Email is the quickest way to reach us.

Overview

Nomad Pro is a local-first record-keeping app for UK digital nomads. Your travel, tax, and planning records are stored on your device, not in a Nomad Pro account. There is no sign-up and no password.

We may measure how the app is used — which screens are opened, which features are used, and where people give up — so we can see what helps and what does not. We may also work with advertising and measurement partners so that people who would find Nomad Pro useful get to hear about it.

None of that ever includes the records you keep here. Your travel log, your dated country stays, your tax configuration and the documents you import are not sent anywhere for analytics, advertising or marketing, and are never used to build an advertising profile of you. That is the line: how the app is used can be measured, where you have been cannot.

Two things happen automatically each time you open the app, without you asking for them: it checks your subscription, and it asks our server whether a new update to the residence rules has been published. Both are set out below, under “Automatic checks when you open the app”.

Everything else that leaves your device does so because you chose a feature that cannot work without sending it: Premium AI features, document and statement imports, in-app feedback, and country data requests. Each of those is described below, in full and without euphemism, so you can decide whether to use it.

What stays on your device

The app stores what you enter in local files on your device: your profile, tax-year configuration, travel log, work-day records, daily check-ins, planning scenarios, exports, and the summaries the app keeps of your previous AI requests.

We have no copy of those files and no way to read them remotely. If you enable iCloud or device backup, Apple may back the files up under its own terms.

What leaves your device

When the app first runs it generates a random identifier of the form “nomad_” followed by a timestamp and random characters. It is stored on your device and is not derived from your name, your email address, or any device identifier. It is how the subscription service recognises your purchase and how our server checks that a Premium request is entitled to a response, so it is sent with every subscription check and every AI request. It is a persistent identifier: it stays the same until you delete and reinstall the app.

Nothing else leaves your device except through the automatic checks and the features described in the sections that follow. Those sections are the complete list.

Automatic checks when you open the app

Two requests are made automatically each time you open Nomad Pro. You do not ask for either of them, so they are set out here first.

The first is a subscription check. The app asks the subscription service whether your Premium entitlement is current, sending the identifier described above. It runs when the app starts and again each time you return to it, so an expiry, a refund, or a billing problem is reflected without waiting for a restart.

The second is a rules update check. The app asks our server whether a new human-reviewed update to HMRC’s Statutory Residence Test guidance has been published. That request sends none of your records, and it does not send your subscription identifier: it asks only for the current bulletin. It does still reach our server, so the short-lived operational logs described under “Who processes your information” briefly hold your device’s IP address and the time you opened the app. If the request fails, or you are offline, the app uses the summary built into it and says nothing.

If a new bulletin has been published and you have allowed notifications, the app raises an alert on your device about it. The wording of that alert comes from our server; the alert itself is scheduled locally by the app, and nothing about you is sent in order to raise it.

Neither check can be turned off inside the app at present. If that matters to you, please write to us at the address at the end of this policy.

Subscriptions and payments

Payment is handled by the Apple App Store or Google Play. We never see your card details, and we do not receive your name or billing address from the store.

We use RevenueCat to manage subscriptions. The identifier described above, your purchase and transaction state, subscription metadata, the platform you are on, and your app version are processed by the app store and by RevenueCat so entitlements can be granted, restored, and refreshed.

Our server also stores small usage counters against that identifier in RevenueCat — how many historical imports you have run, on which day, and when the last one was — so that fair-use limits on an expensive feature can be applied. Those counters are numbers and dates, not content.

Premium AI features

Premium AI features send information from your device to our server, which checks your subscription and passes the request to an AI provider. This is the part of the app that transmits the most, so here is exactly what goes with a request for the residence explanation, the accountant narrative, and natural-language entry. The request includes:

• your name as you entered it;
• your citizenships;
• your departure date;
• the goal you chose;
• the country you are currently recorded in and the date you arrived;
• a one-line residence summary for each tax year the app has calculated;
• your UK day count, UK work-day count, tie count, and applied test for the tax year in question;
• your Schengen days used and your country-limit day counts;
• the alerts currently showing on your dashboard;
• your twelve most recent travel entries with country, start date, end date, purpose, and how each was recorded;
• the number of work days recorded in the tax year;
• up to three planning scenarios with their titles, verdicts, and the countries and dates of each planned stop;
• short summaries of your recent AI requests, up to the last twenty.

Natural-language entry also sends the sentence you type, because that is what you are asking the app to read.

That is a meaningful amount of personal information, including your name, your citizenships, and where you have been. If you would rather it did not leave your device, do not use these features. Everything else in the app works without them.

Document and statement imports

Bank-statement import and free-text historical import send the files you choose to upload — including complete bank or card statement PDFs, CSV, TXT, and JSON files — or the text you paste. Those files go to our server and on to the AI provider so stays can be inferred from them.

For these two features the app does not send your profile, travel log, or dashboard. It sends only the feature name, today’s date, the tax year, and your subscription identifier alongside the file.

A bank statement contains a great deal that has nothing to do with travel. Please redact anything you would rather not send, or use an extract covering only the dates you need.

PDFs are uploaded to the AI provider’s file store for the request and our server asks the provider to delete them once the request finishes. We do not keep a copy.

Feedback and country requests

If you send feedback from inside the app, the message you write, the category you pick, your app version, your platform, and your subscription identifier are sent to our server and filed as an issue in our private code repository, which is hosted by GitHub. Please do not include anything in the message you would not want stored there.

If you request data for a country we do not yet cover, we receive the country, your citizenships, the optional note you write, your platform, app version, subscription tier, and your subscription identifier. That request is stored in private file storage and emailed to us through Resend so we can act on it.

Who processes your information

Apple and Google process your purchase. RevenueCat processes subscription entitlements and the usage counters described above. Anthropic provides the AI model that generates Premium AI responses; we send requests to it through our own server so that our API key never sits inside the app. Vercel hosts that server, this website, and the private storage used for country requests. Resend sends the country-request notification email. GitHub stores in-app feedback as a private issue.

Anthropic processes the request under its commercial API terms, which state that customer content is not used to train its models. What Anthropic and the other providers retain, and for how long, is governed by their own terms and privacy policies.

Our server does not keep a copy of your prompts, your context, or your uploaded files once it has answered. Vercel keeps short-lived operational logs of requests, which can include IP address and timing, as part of running the service.

Why we are allowed to do this

We rely on the performance of our contract with you for subscription checks and for delivering the Premium features you ask for, and on our legitimate interests in keeping the service running, telling you when the residence rules the app applies have changed, applying fair-use limits, preventing abuse, and responding to the feedback you send us.

Device permissions — location and notifications — are used only with your consent, and you can withdraw that consent at any time in your device settings.

Permissions

Location permission is used to suggest the country you are in during onboarding and check-ins. Your location is used on your device to make that suggestion and is not sent to us as location data.

Notification permission is used for two things: the check-in reminders you set up, and the alert that tells you a new residence-rules bulletin has been published. Both are scheduled by the app on your device — the reminder from your own settings, the bulletin alert from wording our server supplied in answer to the rules update check. There are no remote push notifications: your device holds no push token for us, and we cannot send anything to it while the app is closed.

You can decline all three and continue using the rest of the app, subject to the limits of those features.

Retention and deletion

Records on your device stay there until you edit, clear, or export them, or delete the app. Deleting the app deletes them, and we cannot restore them for you.

We keep country requests and feedback for as long as we need them to improve the app, and we delete them when they are no longer useful. Subscription records are kept by the app store and by RevenueCat for as long as their terms and their tax and accounting obligations require.

International transfers

Our providers are based in, or process data in, countries outside the United Kingdom, including the United States. That means information sent from your device may be processed outside the UK.

Where that happens we rely on the data protection terms offered by those providers, which include the UK International Data Transfer Addendum or equivalent standard contractual clauses.

Your rights

Under UK data protection law you have the right to ask us for a copy of the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable form.

Most of your data never reaches us, so for anything held on your device those rights are exercised directly in the app. For the limited data we do hold — feedback, country requests, waitlist signups, and subscription records — email hello@nomadpro.ai and tell us your subscription identifier if you know it, so we can find the right records.

If you are not happy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first so we can put it right.

Children

Nomad Pro is made for adults managing their own tax records and is not intended for use by children.

The Nomad Pro website

This website is separate from the app. If you join the waitlist here, we store the email address you submit and basic request metadata so we can send you launch updates. You can ask us to delete it at any time by emailing hello@nomadpro.ai.

The website uses Vercel Web Analytics, which reports aggregated page views without cookies and without profiling individual visitors.

Changes to this policy

If what the app sends changes, this policy changes with it before the new behaviour ships, and the date at the top is updated. Where a change materially affects you we will tell you in the app.

Contact

For privacy or support questions, email hello@nomadpro.ai, write to us at the address above, or use the support page.